[wp-trac] [WordPress Trac] #19337: is_ssl() fails on LiteSpeed server
WordPress Trac
wp-trac at lists.automattic.com
Tue Nov 29 00:36:03 UTC 2011
#19337: is_ssl() fails on LiteSpeed server
-----------------------------------------+------------------------------
Reporter: niklasbr | Owner:
Type: defect (bug) | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Security | Version: 3.3
Severity: normal | Resolution:
Keywords: has-patch reporter-feedback |
-----------------------------------------+------------------------------
Comment (by dd32):
The problem here is, What Proxy configurations do you support? There are
at least 4 different fields you can use for the Remote IP when proxied,
none of them guaranteed to be reliable, Many different ways to present SSL
information, etc
In this case, Remapping/correcting the `$_SERVER` vars to what you
''know'' is good for your server configuration after it's been proxied is
a must, only the server admin really knows what fields their proxy is
passing that the proxy has been set and can trust the value of.
You'll want to correct REMOTE_ADDR as well in `wp-config.php` (for spam
filtering and comment logging)
--
Ticket URL: <http://core.trac.wordpress.org/ticket/19337#comment:8>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list